Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
File:                     jhF58KNc8HwWKWcmYoZsoAH3W9M.mft (raw, json)
Hash identifier:          66yvop14mhajrKfgIbp7s7s7gNZ3623wzgXqz04Y5M4=
Subject key identifier:   9C:81:4E:34:0F:B6:22:42:CB:94:39:AB:B0:64:E9:3D:E5:05:2C:14
Authority key identifier: 8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
Certificate issuer:       /CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Certificate serial:       0196545C5A86939CE7E0A5E6096BE2E70817
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
Manifest number:          0614
Signing time:             Sun 20 Apr 2025 18:01:00 +0000
Manifest this update:     Sun 20 Apr 2025 18:01:00 +0000
Manifest next update:     Mon 21 Apr 2025 18:01:00 +0000
Files and hashes:         1: EmWFQT9EIlKM8K10K5cWz3oRk8c.roa (hash: mVuZgTV0YIvEIlEbhmtrwLHhCh+ETHzlqM+RSaYL3ls=)
                          2: jhF58KNc8HwWKWcmYoZsoAH3W9M.crl (hash: p2tbuRakvI9d9kn8EO2KC+htEdvwjQ8H6bfO3yDkZc8=)
                          3: vOuw-thqqsBDOxSUXEaJasEA7qM.roa (hash: 5FoG4V28mx1fz8vugdFd18SYEUDw3t0Z7vgkJvX8GgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 18:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:5c:5a:86:93:9c:e7:e0:a5:e6:09:6b:e2:e7:08:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e1179f0a35cf07c1629672662866ca001f75bd3
        Validity
            Not Before: Apr 20 18:01:00 2025 GMT
            Not After : Apr 21 18:01:00 2025 GMT
        Subject: CN=9c814e340fb62242cb9439abb064e93de5052c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:74:05:0c:ec:e2:5b:75:dd:b0:05:16:1a:4a:
                    02:b6:ae:bf:51:13:ff:3e:24:10:80:54:22:57:fd:
                    44:c4:0a:16:84:ba:4b:39:27:cb:1f:31:5c:63:48:
                    e4:df:9f:90:93:12:fb:57:6b:7c:f5:21:d0:22:d2:
                    da:89:9d:14:07:bd:6a:98:cb:12:9c:b4:b1:ea:50:
                    ab:11:96:4f:4d:a9:32:23:d3:fa:e7:8b:d7:f9:b0:
                    b1:96:0d:ee:e5:2c:35:5f:17:9f:22:81:c2:89:f5:
                    1f:08:14:64:8e:c5:ad:c0:15:e1:5b:99:7e:d9:42:
                    a5:c9:09:2c:eb:3e:ee:d8:d1:a0:95:86:63:55:15:
                    9a:6b:ea:31:8d:9c:26:d3:d2:79:2c:06:a4:11:45:
                    7e:94:40:ae:f4:6c:53:4d:ab:9d:57:2e:11:78:ef:
                    00:34:86:b8:5f:2c:04:5b:7e:e4:f3:29:e7:23:02:
                    d0:d4:30:cd:3f:18:29:14:a9:24:ee:b5:7e:a8:3c:
                    77:56:11:4d:35:2c:b1:07:80:fb:08:4c:34:4a:7a:
                    93:07:48:5f:e3:83:bb:b6:fe:30:89:fe:2c:08:61:
                    0c:7d:a2:68:48:28:be:79:98:87:30:cc:21:0a:f9:
                    36:71:64:8e:f7:81:f8:55:af:d5:f9:a7:1f:2d:33:
                    a5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:81:4E:34:0F:B6:22:42:CB:94:39:AB:B0:64:E9:3D:E5:05:2C:14
            X509v3 Authority Key Identifier:
                keyid:8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a3:b8:39:59:fc:2c:03:38:e0:f8:a1:80:bc:fc:6a:a7:48:
         d5:c6:21:b6:b3:de:46:6a:96:c8:9f:6b:cc:42:c3:b1:cb:f9:
         18:4b:02:0d:20:cd:b6:a2:82:f7:01:5e:fe:c1:e8:cb:3a:e8:
         cc:d2:7d:15:c3:7d:68:19:de:b0:1c:7d:7f:18:15:61:ef:dd:
         25:0e:e4:b8:1a:3d:f6:2c:a2:a6:d1:c7:22:fe:95:69:86:37:
         ce:c8:dd:db:66:82:c5:d7:de:e1:eb:8d:78:5c:a3:5e:b4:bd:
         ad:7b:cd:40:4d:0e:5e:a7:f1:c7:51:6c:bf:36:9a:6e:cc:6f:
         b4:5c:90:d6:ac:a7:a0:28:21:32:9a:28:37:4e:7d:fa:06:1d:
         c4:7d:84:f4:f1:48:f3:b2:ba:09:94:1a:ed:30:c4:a7:6e:71:
         38:be:eb:db:49:1d:79:18:d7:5b:2f:39:3c:1e:d5:12:0d:4d:
         46:7f:e4:dd:72:e3:00:72:82:69:1c:e7:0a:bc:43:70:6b:99:
         cf:aa:7e:1a:c1:6b:2e:9d:3f:46:a7:c5:52:a7:34:76:94:a1:
         b3:09:e2:a7:0e:bf:f9:5a:fd:c1:f2:0a:e3:cc:df:ad:af:01:
         22:c8:62:cb:4c:90:b7:83:b1:c9:a6:a7:f1:64:ed:68:be:e9:
         ff:03:59:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:49:29 2025 by rpki-client